Privacy Policy

Who we are

Oman Minerals Trading Company (OMTC) is a state-linked minerals export company incorporated in the Sultanate of Oman and operating under the Minerals Development Oman umbrella. Our registered office is at Airport Heights, PO Box 1004, Muscat, Sultanate of Oman. We are the controller of any personal data you provide to us through this website.

Information we collect

When you submit our contact form, we collect the details you enter — your name, email address and message — and the language of the page you used. We do not collect payment information or national identification numbers. Our web servers automatically record standard technical data such as your IP address, browser type and the pages you request; this data is used only for security and operational purposes and is not linked to your identity.

Protecting our contact form

To keep the contact form free of spam and abuse, every submission is checked automatically before anything is sent: a hidden field and a timing check that only automated programs trip, and a limit on how many messages one connection can send in a short time. That limit is counted by Upstash (Upstash Inc.) using a one-way hashed form of your IP address, which cannot be turned back into the address and is deleted automatically after about 10 minutes. Vercel BotID (Vercel Inc.) also checks form submissions for signs of automation; it runs invisibly when you send the form and is used only to tell people from automated programs. We do not send an automatic reply to the address you enter: you see a confirmation on screen, and a member of our team replies to you personally.

Analytics and usage data

With your consent, this website uses Google Analytics 4 (GA4), provided by Google Ireland Limited with Google LLC as its processor, to understand how visitors navigate the site — pages visited, time on page, referral source, approximate location and device type. GA4 does not log or store IP addresses. We also use Vercel Analytics, provided by Vercel Inc., which counts page views on every visit without setting cookies or storing personally identifiable information. Google Signals and all advertising features are switched off, and neither service is used to build individual profiles or target advertising. Google Analytics does not load until you choose Accept in the cookie notice, and Vercel Analytics is not part of that choice; the cookies involved, what each service collects and how to change your choice are set out under “Cookies and analytics” below.

Cookies and analytics

Google Analytics does not run on this site until you choose Accept in the cookie notice. If you choose Reject — or your browser sends a Global Privacy Control signal — it never loads, and the site works exactly the same. Vercel Analytics, described below, sets no cookies and is not part of that choice: it counts every visit.

If you accept, Google Analytics 4 sets two cookies: _ga, which tells one browser's visits apart, and _ga_<ID>, which keeps the current session. Both expire after 13 months. Google Signals and every advertising feature are switched off, so the data is not used for advertising or linked to a Google account.

Vercel Analytics (Vercel Inc.) sets no cookies and stores nothing on your device, which is why it runs without asking. It counts page views — with the page, the referring site, the approximate location and the type of device, operating system and browser — using a hash of the request that is discarded within 24 hours, so it cannot recognise you on a later day. We see only totals.

Google Analytics runs only on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw it at any time — choose Cookie settings at the foot of any page, or switch Cookies & analytics off on the Settings page. Google Analytics stops at once and its cookies are deleted; withdrawing does not affect measurement that took place before. Vercel Analytics rests on our legitimate interest in knowing how many people use the site and which pages help them (Article 6(1)(f) GDPR); because it identifies no one and stores nothing on your device, it does not depend on the cookie notice.

Your answer is kept in your browser's local storage (analytics-consent) for 12 months, after which we ask again. It is not a cookie and is never sent to us. Two other items are strictly necessary and need no consent: a NEXT_LOCALE cookie that remembers the language you browse in (for up to 12 months), and the comfort preferences you choose on the Settings page — larger text, custom cursor, smooth scrolling — kept in local storage (mtc-settings) on your device. Neither is used to track you or shared with anyone. We do not use advertising or social-media cookies.

How we use your information

We use the contact details you submit to respond to your enquiry, to maintain a record of our correspondence and, where you have indicated commercial interest, to follow up on potential business opportunities. We use the page-view totals from Vercel Analytics and, where you have agreed to it, Google Analytics data to understand how our website performs and to improve its content and usability. We do not sell, rent or trade your personal data to any third party.

Third-party processors

We share data with the following sub-processors solely to operate this website: Resend (Resend Inc., USA) — our transactional email provider, which delivers contact-form submissions to our team (we do not use it to send automatic replies to you); Upstash (Upstash Inc., USA) — keeps the short-lived, hashed counters that limit how many messages one connection can send through the contact form; Vercel BotID (Vercel Inc., USA) — bot detection on contact-form submissions; Oman Data Park (Muscat, Sultanate of Oman) — hosts the web server that serves this site at mtcoman.om and processes every web request to it; Google Analytics (Google Ireland Limited, with Google LLC, USA, as its processor) — our web analytics platform, used only if you accept it; Vercel (Vercel Inc., USA) — hosts a copy of this website and provides Vercel Analytics, which counts page views without cookies. Each processor is bound by a data-processing agreement, and those outside Oman also by standard contractual clauses; Google LLC and Vercel Inc. are also certified under the EU–U.S. Data Privacy Framework.

Data retention

We retain contact-form submissions and associated email correspondence for up to 36 months from the date of receipt, after which they are permanently deleted. The hashed rate-limit counters that protect the contact form expire automatically after about 10 minutes. Google Analytics 4 user and event data is retained for up to 14 months, after which Google deletes it automatically; Vercel Analytics keeps no identifier that could link page views to you. Server logs are purged on a rolling 90-day cycle.

Your rights

You have the right to request access to, correction of or deletion of any personal data we hold about you. If you are located in the European Economic Area or the United Kingdom, you may also have the right to data portability and the right to object to certain processing activities under the GDPR or the UK GDPR. Where we rely on your consent — as we do for Google Analytics — you can withdraw it at any time through Cookie settings at the foot of any page; this does not affect processing carried out before you withdrew it. To exercise any of these rights, email us at info@mtcoman.om. We will respond within 30 days.

International data transfers

This site at mtcoman.om is served from the Sultanate of Oman. Our other sub-processors (Resend, Upstash, Google, Vercel) are headquartered in the United States and may process your data on servers in the USA or the European Union. Google LLC and Vercel Inc. are certified under the EU–U.S. Data Privacy Framework. Where personal data is transferred outside the Sultanate of Oman and that framework does not apply, we rely on standard contractual clauses or equivalent safeguards to ensure your data receives an adequate level of protection.

Children

This website is intended for business and professional audiences. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted personal data through this site, please contact us at info@mtcoman.om and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will always show when it was last revised. Continuing to use the site is never taken as consent to Google Analytics: if a change widens what that consent covers, we will ask for your choice again.

Contact us

For any questions about this Privacy Policy or the way we handle your personal data, please write to us at info@mtcoman.om or by post to Oman Minerals Trading Company, PO Box 1004, Airport Heights, Muscat, Sultanate of Oman.